Skip to content
Swift Mailer Vulnerability Allows Remote Code Execution

Swift Mailer Vulnerability Allows Remote Code Execution

First seen 3 Nov 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •Swift Mailer vulnerability allows remote code execution via crafted email addresses.
  • •Affected systems include Ubuntu 16.04 with libphp-swiftmailer.
  • •Users are urged to update their systems to mitigate the risk.

A vulnerability in Swift Mailer, discovered by Dawid Golunski, allows remote attackers to execute arbitrary code by sending specially crafted email addresses. This flaw affects the libphp-swiftmailer package, which is a widely used PHP mailer. The issue arises from improper sanitization of email addresses in the mail transport, enabling attackers to pass extra parameters to the mail command. Affected systems include those running Ubuntu 16.04. A patch has been released to address this vulnerability, and users are advised to update their systems promptly. The vulnerability has not been reported as in the wild. Ubuntu Pro users can benefit from extended security coverage for this package.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-03
Vulnerability disclosed
Dawid Golunski reported a vulnerability in Swift Mailer that allows remote code execution through email address manipulation.
Ubuntu
2026-11-03
Patch released
Ubuntu released a patch for the libphp-swiftmailer package to fix the vulnerability and advised users to update their systems.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 4

Common questions

Which versions of Swift Mailer are affected?
The vulnerability affects libphp-swiftmailer in Ubuntu 16.04.
Is there evidence of active exploitation?
No evidence of active exploitation has been reported for this vulnerability.
What should I do to protect my system?
Update your system to the latest version of libphp-swiftmailer to mitigate the risk.